diff --git a/.gitignore b/.gitignore
index cdc28438..1340c20b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,3 +22,5 @@ SOURCES/selinux-policy-contrib-c6da44c.tar.gz
 /selinux-policy-3778a9d.tar.gz
 /selinux-policy-contrib-e1cc232.tar.gz
 /selinux-policy-ff2ac01.tar.gz
+/selinux-policy-b5586ba.tar.gz
+/selinux-policy-contrib-267743a.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index d90f6173..9fa2a421 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 ff2ac01e170dbcee442f21f28cda5bee508469d9
+%global commit0 b5586baa73b14fb8ca458fa4bbe70522b1ec264b
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 e1cc232e7012453a6befe5216bae41c44322f01a
+%global commit1 267743aa7d7e85fe2bf3ccd199927d6c00bb4439
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 127%{?dist}
+Release: 128%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -718,6 +718,12 @@ exit 0
 %endif
 
 %changelog
+* Fri Aug 25 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-128
+- Allow ssh_agent_type manage generic cache home files
+Resolves: rhbz#2177704
+- Add chromium_sandbox_t setcap capability
+Resolves: rhbz#2221573
+
 * Thu Aug 17 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-127
 - Allow cloud_init create dhclient var files and init_t manage net_conf_t 3
 Resolves: rhbz#2229726
diff --git a/sources b/sources
index be2949bd..094d7a4b 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (selinux-policy-ff2ac01.tar.gz) = 92b3eb6205ed3a6b9d3b59f4d04a5d2917d899813772e5571fb2b294e06210ece18c7cfe198e943f3b7b7700145390dcd5b7594f521095fa42b218ea37c3b6a7
-SHA512 (selinux-policy-contrib-e1cc232.tar.gz) = 8039d1333ff6bad0d86f8311e1d8571213a838bacbb08f143493c6a2f29bc892ec8c8c734241df3848e55c7533d474eb5abc9846d626bacba169b9edda6f8d0f
+SHA512 (selinux-policy-b5586ba.tar.gz) = 97fbc81ee2b5f6a360a4adc40401035c07cbe8b900a110ab338137f7271ea8aa2eb80a600ced5c411d7be965f093c2ed8eecaf7eb5394e6d963cc362a61385bb
+SHA512 (selinux-policy-contrib-267743a.tar.gz) = 4020f94e82b3d672844d8c1a845b66746f68898ea20b1916132288ae6b378de3f157e49ecf1d0c2303282c43062fa7707cc60af1d4eb942755b5d0805f6ede8f
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 14b401ae0c15afcf6a9888ffd0c6e6b624b658527799521abbed7ec6b567b23ae3bbe770a7a4e357ff077b404ae330c66c4ff902d4ecca75aea73f305cdf66b4
+SHA512 (container-selinux.tgz) = f88bdedfdc08d129686f5a96dc19108d96f2cdc30004fe5c048cde0affe35d040d6654b8b0d97e9c0a62f6cdc293dcea45ad61fabc96c9bf2384c72ad52ad84b